From e94c915c7aa5b2293e11d0c72efd65e98eb5a431 Mon Sep 17 00:00:00 2001 From: djoate <56777051+djoate@users.noreply.github.com> Date: Sun, 24 Nov 2019 19:47:55 -0500 Subject: [PATCH] Key OS section --- _includes/sections/android-addons.html | 20 ++--- .../sections/live-operating-systems.html | 7 +- .../sections/mobile-operating-systems.html | 12 +-- _includes/sections/operating-systems.html | 53 +++++++------ _includes/sections/router-firmware.html | 8 +- _includes/sections/windows10.html | 76 +++++++++---------- pages/os.html | 1 + 7 files changed, 88 insertions(+), 89 deletions(-) diff --git a/_includes/sections/android-addons.html b/_includes/sections/android-addons.html index c44a849a..07729ccd 100644 --- a/_includes/sections/android-addons.html +++ b/_includes/sections/android-addons.html @@ -1,37 +1,37 @@ -

Android Privacy Add-ons

+

{% t Android Privacy Add-ons %}

- NetGuard + {% t NetGuard %}
-

Control your traffic with NetGuard

-

NetGuard provides simple and advanced ways to block certain apps' access to the internet without the help of root privileges. Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection, allowing you to control which apps are able to call home or not. +

{% t Control your traffic with NetGuard %}

+

{% t NetGuard provides simple and advanced ways to block certain apps' access to the internet without the help of root privileges. Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection, allowing you to control which apps are able to call home or not. %}

- Orbot + {% t Orbot %}
-

Tor for Android with Orbot

-

Orbot is a free proxy app that empowers other apps to use the internet more securely. Orbot uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world. Root Mode: Orbot can be configured to transparently proxy all of your Internet traffic through Tor. You can also choose which specific apps you want to use through Tor. +

{% t Tor for Android with Orbot %}

+

{% t Orbot is a free proxy app that empowers other apps to use the internet more securely. Orbot uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world.%} {% t Root Mode: Orbot can be configured to transparently proxy all of your Internet traffic through Tor. You can also choose which specific apps you want to use through Tor.%}

-

See also

+

{% t See also %}

diff --git a/_includes/sections/live-operating-systems.html b/_includes/sections/live-operating-systems.html index bf238f36..6092cb1e 100644 --- a/_includes/sections/live-operating-systems.html +++ b/_includes/sections/live-operating-systems.html @@ -1,4 +1,4 @@ -

Live CD Operating Systems

+

{% t Live CD Operating Systems %}

{% include cardv2.html title="Tails" @@ -30,9 +30,8 @@ website="http://puppylinux.org/" source="http://distro.ibiblio.org/puppylinux/" %} -

Worth Mentioning

+

{% t Worth Mentioning %}

diff --git a/_includes/sections/mobile-operating-systems.html b/_includes/sections/mobile-operating-systems.html index b48024e7..cda06c62 100644 --- a/_includes/sections/mobile-operating-systems.html +++ b/_includes/sections/mobile-operating-systems.html @@ -1,7 +1,7 @@ -

Mobile Operating Systems

+

{% t Mobile Operating Systems %}

{% include cardv2.html @@ -35,10 +35,10 @@ website="https://ubuntu-touch.io/" github="https://github.com/ubports" %} -

Worth Mentioning

+

{% t Worth Mentioning %}

diff --git a/_includes/sections/operating-systems.html b/_includes/sections/operating-systems.html index c6eae044..8af95b8f 100644 --- a/_includes/sections/operating-systems.html +++ b/_includes/sections/operating-systems.html @@ -1,7 +1,7 @@ -

PC Operating Systems

+

{% t PC Operating Systems %}

{% include cardv2.html @@ -35,48 +35,47 @@ tor="http://sejnfjrq6szgca7v.onion" gitlab="https://salsa.debian.org/qa/debsources" %} -

Worth Mentioning

+

{% t Worth Mentioning %}

-

Warning

+

{% t Warning %}

-

Remember to check CPU vulnerability mitigations

+

{% t Remember to check CPU vulnerability mitigations %}

-

This also affects Windows 10, but it doesn't expose this information or mitigation instructions as easily. MacOS users check How to enable full mitigation for Microarchitectural Data Sampling (MDS) vulnerabilities on Apple Support.

+

{% t This also affects Windows 10, but it doesn't expose this information or mitigation instructions as easily. MacOS users check How to enable full mitigation for Microarchitectural Data Sampling (MDS) vulnerabilities on Apple Support.%}

-

When running a enough recent Linux kernel, you can check the CPU vulnerabilities it detects by tail -n +1 /sys/devices/system/cpu/vulnerabilities/*. By using tail -n +1 instead of cat, the file names are also visible.

+

{% t When running a enough recent Linux kernel, you can check the CPU vulnerabilities it detects by tail -n +1 /sys/devices/system/cpu/vulnerabilities/*. By using tail -n +1 instead of cat, the file names are also visible. %}

- In case you have an Intel CPU, you may notice "SMT vulnerable" display after running the tail command. To mitigate this, disable hyper-threading from the UEFI/BIOS. You can also take the following mitigation steps below if your system/distribution uses GRUB and supports /etc/default/grub.d/: + {% t In case you have an Intel CPU, you may notice "SMT vulnerable" display after running the tail command. To mitigate this, disable hyper-threading from the UEFI/BIOS.%} {% t You can also take the following mitigation steps below if your system/distribution uses GRUB and supports /etc/default/grub.d/:%}

    -
  1. sudo mkdir /etc/default/grub.d/ to create a directory for additional grub configuration
    2. -
  2. echo GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT l1tf=full,force mds=full,nosmt mitigations=auto,nosmt nosmt=force" | sudo tee /etc/default/grub.d/mitigations.cfg to create a new grub config file source with the echoed content
    3. -
  3. sudo grub-mkconfig -o /boot/grub/grub.cfg to generate a new grub config file including these new kernel boot flags
    4. -
  4. sudo reboot to reboot
    5. -
  5. after the reboot, check tail -n +1 /sys/devices/system/cpu/vulnerabilities/* again to see that everything referring to SMT now says "SMT disabled."
    6. +
  6. sudo mkdir /etc/default/grub.d/ {% t to create a directory for additional grub configuration %}
    7. +
  7. echo GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT l1tf=full,force mds=full,nosmt mitigations=auto,nosmt nosmt=force" | sudo tee /etc/default/grub.d/mitigations.cfg {% t to create a new grub config file source with the echoed content %}
    8. +
  8. sudo grub-mkconfig -o /boot/grub/grub.cfg {% t to generate a new grub config file including these new kernel boot flags %}
    9. +
  9. sudo reboot {% t to reboot %}
    10. +
  10. {% t after the reboot, check tail -n +1 /sys/devices/system/cpu/vulnerabilities/* again to see that everything referring to SMT now says "SMT disabled." %}
-
Further reading
+
{% t Further reading %}
diff --git a/_includes/sections/router-firmware.html b/_includes/sections/router-firmware.html index 6c9cbd61..b36b9477 100644 --- a/_includes/sections/router-firmware.html +++ b/_includes/sections/router-firmware.html @@ -1,4 +1,4 @@ -

Open Source Router Firmware

+

{% t Open Source Router Firmware %}

{% include cardv2.html title="OpenWrt" @@ -29,9 +29,9 @@ website="https://librecmc.org" git="https://gogs.librecmc.org/libreCMC/libreCMC" %} -

Worth Mentioning

+

{% t Worth Mentioning %}

diff --git a/_includes/sections/windows10.html b/_includes/sections/windows10.html index 6d4987b4..805f2d60 100644 --- a/_includes/sections/windows10.html +++ b/_includes/sections/windows10.html @@ -1,106 +1,106 @@ -

Don't use Windows 10 - It's a privacy nightmare

+

{% t Don't use Windows 10 - It's a privacy nightmare %}

-Windows 10 Privacy +{% t Windows 10 Privacy %}
    -
  1. Data syncing is by default enabled. +
  2. {% t Data syncing is by default enabled. %}
    3. -
  3. Your device is by default tagged with a unique advertising ID. +
  4. {% t Your device is by default tagged with a unique advertising ID. %}
    5. -
  5. Cortana can collect any of your data. +
  6. {% t Cortana can collect any of your data. %}
    7. -
  7. Microsoft can collect any personal data. +
  8. {% t Microsoft can collect any personal data. %}
    9. -
  9. Your data can be shared. +
  10. {% t Your data can be shared. %}
-

Download: W10Privacy

+

{% t Download: W10Privacy %}

-

This tool uses some known methods that attempt to disable major tracking features in Windows 10.

+

{% t This tool uses some known methods that attempt to disable major tracking features in Windows 10. %}

-

Related Information

+

{% t Related Information %}

-

Some good news

+

{% t Some good news %}

-

More bad news

+

{% t More bad news %}

diff --git a/pages/os.html b/pages/os.html index 924ebc33..372f0b1c 100644 --- a/pages/os.html +++ b/pages/os.html @@ -3,6 +3,7 @@ layout: page permalink: /operating-systems/ title: "Operating Systems" description: "Even your own computer could be compromising your privacy. Discover our recommended OS choices for all the devices you use." +translate: true --- {% include sections/operating-systems.html %}